medium4.3Public exploit code
CVE-2010-4518
Cross-site scripting (XSS) vulnerability in wp-safe-search/wp-safe-search-jx.php in the Safe Search plugin 0.7 for WordPress allows remote attackers to inject …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin Safe Search - 'v1' Cross-Site Scripting2010-12-08 · webapps · php · Verified
Impact
Cross-site scripting (XSS) vulnerability in wp-safe-search/wp-safe-search-jx.php in the Safe Search plugin 0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the v1 parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wobeo | Wp-Safe-Search | Version 0.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/69762
- http://secunia.com/advisories/42544
- http://www.johnleitch.net/Vulnerabilities/WordPress.Safe.Search.0.7.Reflected.Cross-site.Scripting/66
- http://www.securityfocus.com/bid/45267
- http://osvdb.org/69762
- http://secunia.com/advisories/42544
- http://www.johnleitch.net/Vulnerabilities/WordPress.Safe.Search.0.7.Reflected.Cross-site.Scripting/66
- http://www.securityfocus.com/bid/45267